What is the CVSS score of CVE-2026-36806?

CVE-2026-36806 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tenda W15E are affected by CVE-2026-36806?

Tenda W15E router firmware v15.11.0.10 contains a remotely exploitable denial-of-service vulnerability affecting device availability.

How to fix or mitigate CVE-2026-36806?

24 hours: Inventory Tenda W15E routers running firmware v15.11.0.10 and document network criticality of affected devices. 7 days: Implement network segmentation to restrict unauthenticated HTTP access to device management interfaces; deploy rate limiting or WAF rules blocking malformed HTTP POST requests to formModifyWebAuthUser endpoints. 30 days: Monitor vendor security advisories for patched firmware release; evaluate alternative router platforms with active vendor support if device replacement is operationally feasible.

Tenda W15E CVE-2026-36806

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-06-09 mitre

Denial Of Service Buffer Overflow Stack Overflow Tenda N A

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 17:25 vuln.today

CVSS changed

Jun 10, 2026 - 17:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda W15E router firmware v15.11.0.10 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request that triggers a stack buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthUser function. No public exploit identified at time of analysis, and EPSS scoring places exploitation probability at just 0.01% (2nd percentile), suggesting low near-term mass-exploitation likelihood despite the network-reachable attack surface. The flaw is not listed in CISA KEV.

Technical ContextAI

The Tenda W15E is a SOHO/SMB wireless router. The vulnerability sits in the device's embedded HTTP management interface, specifically in the formModifyWebAuthUser handler that processes web authentication user modifications. CWE-121 (Stack-based Buffer Overflow) indicates that the webAuthUserPwd parameter is copied into a fixed-size stack buffer without proper length validation, corrupting adjacent stack memory (return addresses, saved registers, local variables) when oversized input is supplied. On MIPS/ARM-based consumer router firmware like Tenda's, such overflows typically crash the httpd process and force a watchdog reboot. The supplied CPE string ('cpe:2.3:a:n/a:n/a:*') is a placeholder and does not authoritatively identify the affected product - identification relies on the description's explicit naming of Tenda W15E firmware v15.11.0.10.

RemediationAI

No vendor-released patch identified at time of analysis - Tenda has not published a referenced advisory or fixed firmware version in the available data. Until Tenda issues updated W15E firmware, operators should disable WAN-side / remote web management on the device (Tenda admin UI > System Settings > Remote Management), restrict LAN access to the management interface to a dedicated admin VLAN or specific source IPs via firewall ACLs, and change default credentials so that any pre-auth crash requires network reachability to the web UI rather than easy discovery. Be aware that disabling remote management blocks legitimate remote administration and ACL restrictions add operational overhead for distributed deployments. Monitor Tenda's support site (https://www.tendacn.com) for a firmware release superseding 15.11.0.10 and verify the formModifyWebAuthUser handler is fixed before deployment; the SemVulLLM repository link in references is research material, not a patch source.